OffTheDock Privacy Policy

Effective date: August 22, 2026

OffTheDock is operated by Tillo Advisors LLC, a Texas limited liability company (collectively, “OffTheDock,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you use the OffTheDock web portal, mobile application, and related services.

We use information only to provide, secure, support, and improve OffTheDock and its user-facing features. We do not sell personal information, use it for behavioral advertising, or use it to track people across unrelated apps or websites.

Information We Collect

Depending on the features you use, we may collect:

• Account and contact information, including name, email address, phone number, profile image, company, role, and authentication identifiers
• Boat and equipment information, knowledge articles, maintenance records, costs, schedules, reservations, owner time, and related operational records
• Messages, replies, private notes, feedback, issue reports, and other communications submitted through the service
• User content, including documents, links, photos, videos, audio or voice recordings, and other files you choose to upload
• Trip information, including plans, checkpoints, routes, destinations, emergency-contact details, people aboard, and shared trip updates
• Location information, including precise coordinates, when you choose to save a location, record a trip checkpoint, attach location to content, or use another location-enabled feature
• Technical and diagnostic information, including IP address, browser and device type, operating system, application version, security events, usage events needed to operate the service, crash information, and error logs

Location Information

The mobile application may request device location permission for features such as trip progress, checkpoints, saved locations, maps, and location-associated boat records. Depending on your device settings and the feature you use, this may include precise latitude and longitude.

We use location information only to provide the location-enabled feature, display it to authorized users, maintain the applicable boat or trip record, and support or secure the service. We do not use location information for advertising, sell it, or use it to build advertising profiles.

You control location permission through your device settings. You may decline or revoke permission, although location-enabled features may then be unavailable. Before sharing a trip or location externally, review the information that will be visible through the shared link.

Google Sign-In and Authentication Data

If you choose Sign in with Google, Google may provide OffTheDock with basic account information such as your name, email address, Google account identifier, and profile image when available. We use this information only to authenticate you, connect you to an authorized OffTheDock profile, secure your account, and provide the service.

OffTheDock does not use Google user data for advertising, sell it, or use it to train generalized artificial-intelligence models. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

You may revoke OffTheDock’s Google access through your Google Account settings. Revoking Google access stops future Google authentication but does not by itself delete an OffTheDock account or records that must remain available to authorized boat or company users. Contact us to request deletion as described below.

How We Use Information

We use information to:

• Authenticate users and provide authorized access to the correct companies, boats, and records
• Provide communication, Boat Log, maintenance, knowledge, equipment, trip, scheduling, reservation, upload, search, and sharing features
• Send invitations, authentication messages, activity notifications, summaries, and service communications
• Generate user-requested search results and AI-assisted answers from authorized OffTheDock records
• Process feedback, provide customer support, troubleshoot errors, prevent abuse, and maintain security
• Comply with legal obligations and enforce our Terms and Conditions

AI-Assisted Features

When you use an AI-assisted feature, your question and relevant authorized OffTheDock content may be sent to an AI service provider to generate the requested answer. We limit this processing to providing and improving the user-facing OffTheDock feature.

OffTheDock does not use personal information or boat content to train generalized AI models or for advertising. AI-generated answers may be incomplete or inaccurate and must not be relied upon for navigation, emergencies, vessel safety, maintenance decisions, or other safety-critical purposes.

Who Can See Information

Information is visible only as necessary for the service and the sharing choices made by authorized users. Depending on account relationships and permissions:

• Boat owners and users invited to a boat may see information associated with that boat
• Authorized charter-company personnel may see information for boats and owners the company manages
• OffTheDock administrators may access information when reasonably necessary for support, security, debugging, or operation of the service
• Recipients of a secure shared link may see the information designated as shareable on that page; private notes and content not designated for sharing are not intended to appear on public shared pages

Service Providers and Disclosure

We use service providers to operate OffTheDock. These may include Supabase for authentication, databases, and file storage; Vercel for application hosting; Resend for transactional email; Sentry for error monitoring when enabled; and OpenAI for AI-assisted features. These providers process information on our behalf under their applicable agreements and only as needed to deliver their services to OffTheDock.

We do not sell personal information or share it with unrelated companies for marketing, advertising, or data mining. We may disclose information when necessary to operate and secure the service, with your direction or consent, to comply with law or valid legal process, during a business reorganization subject to appropriate protections, or to protect the rights, safety, and security of users, boats, charter companies, Tillo Advisors LLC, or others.

Data Retention and Deletion

We retain account information while an account is active and retain boat, maintenance, trip, schedule, communication, and business records for as long as reasonably needed to provide the service and preserve the records of the boat owner or charter company that controls them. Certain information may remain temporarily in backups, security logs, transaction records, or storage-cleanup systems, and we may retain information when required by law, needed to resolve disputes, or necessary to protect the service.

You may request access, correction, export, or deletion of your personal information by contacting support@tillooadvisors.com. We will verify the request and respond within a reasonable period. Deleting an individual account may not delete boat or company records that other authorized users are entitled or required to retain; when appropriate, we will remove or de-identify the requesting user’s personal information from those records.

The mobile application will provide an account-deletion option as required for supported account types. If that option is unavailable, contact support@tillooadvisors.com and we will provide assistance.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including access controls and encrypted network connections. No online service can guarantee complete security, and users are responsible for protecting their devices and sign-in methods.

Children

OffTheDock is a business and boat-management service and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information without appropriate authorization.

Changes to This Policy

We may update this Privacy Policy as the service or legal requirements change. We will post the revised policy with a new effective date and provide additional notice when a material change requires it.

Contact

For privacy questions or requests, contact Tillo Advisors LLC at support@tillooadvisors.com.